
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/3C2CE992BF9111F0AC4B384FC4F9AE02.roa
File: 3C2CE992BF9111F0AC4B384FC4F9AE02.roa (raw, json)
Hash identifier: VAzIFnBXQqt6Ct1dKnumoM0KsxcHMmo8Zlmko8kqK/s=
Subject key identifier: 5A:5A:AD:D4:F7:FB:62:2E:A4:53:3E:47:93:62:29:B4:1F:48:78:97
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 3BAB
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/3C2CE992BF9111F0AC4B384FC4F9AE02.roa
Signing time: Thu 20 Aug 2026 16:24:28 +0000
ROA not before: Thu 20 Aug 2026 16:24:28 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 55002
IP address blocks: 103.209.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15275 (0x3bab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: Aug 20 16:24:28 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a872a3c-5614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:73:4d:5b:c4:81:ac:da:39:f5:26:f9:a5:03:
e3:13:89:3d:ea:58:8b:9f:8f:6b:c8:f3:cc:d8:65:
c5:70:b6:5c:65:26:52:8f:fd:2a:82:12:8d:87:7b:
85:31:e4:f3:ea:88:c5:7b:f0:78:c3:f0:a6:4a:75:
00:97:e0:a1:73:de:82:cd:ca:9c:be:06:28:19:ef:
b8:51:89:b2:77:4a:31:99:fc:c5:ab:53:12:a6:fb:
4d:46:96:20:1b:d5:dd:8b:2c:27:d8:25:e8:17:73:
9e:0f:84:69:41:b8:d3:0f:0e:f2:3f:8e:15:ff:6b:
f9:e9:65:42:ef:68:41:2a:74:45:7a:23:0c:96:f5:
41:cd:11:47:f2:c9:4c:6a:02:34:bd:1e:79:26:3e:
91:02:b9:bb:a7:21:80:3e:05:46:ed:1b:a3:7a:3c:
75:c0:d1:6e:3f:c3:cb:93:40:69:25:f5:a4:7f:da:
92:a8:ea:eb:78:52:66:30:2e:77:7d:92:2d:7f:43:
a9:a8:57:4b:3d:e7:b2:b9:7e:55:4a:06:ac:db:17:
1c:5d:3e:35:b4:cc:a4:3c:a8:bc:f2:ab:07:b3:6b:
3c:99:ed:89:e6:d0:d7:4d:24:de:33:15:86:8c:01:
4f:8e:1c:ed:3a:a8:6f:3d:19:ef:f2:e0:07:29:97:
c8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5A:AD:D4:F7:FB:62:2E:A4:53:3E:47:93:62:29:B4:1F:48:78:97
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/3C2CE992BF9111F0AC4B384FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.209.7.0/24
Signature Algorithm: sha256WithRSAEncryption
32:69:37:3f:2f:11:f3:28:2f:ad:de:f2:56:81:eb:b5:b4:7a:
a6:cd:85:d3:45:30:d7:16:ff:f8:a0:54:3e:42:8f:ac:3e:6b:
34:0e:ed:90:1d:b3:4d:2f:fa:0d:7a:a7:54:89:a3:51:26:5c:
57:43:db:21:cb:3c:f6:17:c2:b1:f2:07:a6:a8:0a:1c:4a:6f:
15:12:05:90:91:5b:ea:bc:88:ab:5c:88:94:88:3d:41:c6:44:
87:11:d3:85:07:8e:d4:db:e4:22:9e:a1:4a:aa:09:bd:79:5a:
ab:ad:b6:41:fe:20:35:0e:c3:c6:de:23:60:04:9c:47:a6:5f:
c7:9f:c4:51:ea:42:52:eb:16:e6:1f:70:ba:ac:60:df:50:1b:
82:d1:c7:97:3f:ea:7c:bc:8a:cf:d4:06:5d:f8:ad:37:a7:bb:
93:e0:2c:0a:84:23:e2:f8:cf:5b:c8:7b:e2:0b:48:3a:70:03:
7a:3b:32:52:ff:c1:56:49:09:3c:30:5a:ba:9a:03:dd:92:29:
5e:9f:25:8a:72:ba:60:c3:7a:b0:9c:d2:27:21:97:47:7d:c4:
6e:e1:90:3c:24:d8:4f:46:5f:d0:ca:06:d6:46:c6:55:f6:c9:
2e:fa:ae:39:a4:fc:eb:0c:04:a3:65:5a:bc:63:ae:23:fc:9e:
d0:5a:1a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:58:21 2026 by rpki-client